Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: ROMJpagLm8ACxnkYQMPheKR00mWe1JnVOyzpvYZbuCg=
Subject key identifier: EE:40:DC:FF:06:17:FC:08:07:23:81:F5:25:4A:17:CB:74:18:BB:D6
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 019E1EDA216EBB9FBF6C2F806312D86749E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 01:01:12 +0000
Manifest this update: Wed 13 May 2026 01:01:12 +0000
Manifest next update: Thu 14 May 2026 01:01:12 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: aJ8GPiLXGUP9gdScqlHDo6hHpEPgvM4FdYOxhtqq17U=)
2: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (hash: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE=)
3: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (hash: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:21:6e:bb:9f:bf:6c:2f:80:63:12:d8:67:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: May 13 01:01:12 2026 GMT
Not After : May 14 01:01:12 2026 GMT
Subject: CN=ee40dcff0617fc08072381f5254a17cb7418bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:0f:e1:19:bb:cf:73:86:a3:71:b3:29:c5:
4d:f8:6c:75:02:10:14:6f:94:55:cf:81:00:6b:a8:
db:d6:9b:4d:8a:19:d6:0b:33:5a:ce:ed:d3:5c:b3:
ac:70:41:7d:78:d8:b7:de:0e:02:6a:bb:ed:d8:83:
48:19:b5:54:b4:d1:d3:06:b8:4f:3c:04:e6:c1:f2:
45:ab:71:87:1a:ec:c4:8f:bb:4e:c2:77:3e:88:88:
eb:2b:e3:fc:1c:c2:69:11:63:c8:94:20:5b:f8:4b:
73:38:a6:5e:3e:2b:85:a3:af:93:ed:c5:88:c7:82:
10:ae:85:4c:7c:86:35:8f:28:82:f9:b3:7b:61:c0:
0b:b3:6a:3b:cd:d1:16:d4:c4:84:a1:c4:39:95:41:
59:77:35:4d:34:cd:62:eb:2d:6f:5b:ef:0e:e9:3d:
77:a3:c8:82:38:97:40:dc:ca:3f:c8:df:2e:97:28:
74:26:7a:5b:6b:31:cc:09:8f:aa:63:6e:f0:bb:57:
3b:cd:29:f0:91:19:28:ac:08:3c:bc:50:cc:8a:eb:
d8:a6:a8:d5:b2:53:1a:3b:73:03:d8:6f:40:b3:21:
ee:0b:7b:90:d5:de:bd:68:fa:ea:32:7d:33:42:83:
f4:ec:e9:04:b4:bf:f9:95:b9:da:4b:88:7b:20:5c:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:DC:FF:06:17:FC:08:07:23:81:F5:25:4A:17:CB:74:18:BB:D6
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:be:e6:3e:d5:9d:e5:3e:87:1e:86:29:a3:e8:a6:13:b1:
49:94:b6:17:e7:11:3b:24:a6:67:74:86:67:8f:3d:83:9b:c7:
ad:90:93:fa:c3:24:95:fa:16:5c:de:2f:e6:2b:07:1d:ab:af:
ca:af:d1:da:a5:13:bf:0c:e2:9b:a7:e2:ea:0d:04:de:22:b5:
e3:26:b2:a5:f0:95:8b:e0:d9:15:16:23:70:7f:e7:4a:75:0f:
04:fa:75:32:45:6d:1a:f1:b1:77:29:80:7b:c7:3c:1f:6b:2e:
f7:96:d3:34:75:35:24:e3:72:ef:c6:fa:f0:73:47:ec:7e:dc:
bf:99:51:1e:a5:36:e8:3d:7d:37:c2:15:54:87:ce:93:f4:06:
94:ce:d0:1c:67:dc:f0:25:7f:7d:00:88:c7:16:63:76:17:20:
f3:a5:9f:30:4f:d2:c2:59:04:92:c7:14:da:84:6a:3e:8d:42:
53:53:5d:d1:40:7d:23:22:c5:f5:81:b1:b2:91:1a:48:89:e9:
73:98:46:68:05:08:1f:c9:eb:a9:e8:9c:85:c6:94:63:c8:e8:
2a:16:f3:00:fe:a6:fb:71:ee:2c:87:5a:35:b6:48:fd:4c:75:
64:98:fe:8f:97:1e:54:dd:74:63:f1:5d:75:31:77:bf:e3:6f:
35:1a:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:33 2026 by rpki-client